Microsoft · Security update · September 14, 2021

KB5005633: September 2021 security update

KB5005633, released September 14, 2021, fixes 25 CVEs across 4 products. 2 of them are being exploited (CVE-2021-40444); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
25
2 rated Critical
Exploited
2
CVE-2021-40444
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9784
99th percentile

Priority of the 25 CVEs

Patch now 2 Urgent 7 High 9 Routine 7

Applies to

Product
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-40444 Windows MSHTML Platform Remote Code Execution 8.8 0.9784 KEVRansomwareDisclosedExploited
Patch now CVE-2021-36955 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0407 KEVRansomwareExploited
Urgent CVE-2021-36958 Windows Print Spooler Components Remote Code Execution 7.8 0.3079 DisclosedMore likely
Urgent CVE-2021-26435 Windows Scripting Remote Code Execution 8.1 0.0538 Exploitation Less Likely
Urgent CVE-2021-36965 Windows WLAN Auto Config Service Remote Code Execution 8.8 0.0468 Exploitation Less Likely
Urgent CVE-2021-38639 Windows Win32K Elevation of Privilege 7.8 0.0136 More likely
Urgent CVE-2021-36963 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0122 More likely
Urgent CVE-2021-38633 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0103 More likely
Urgent CVE-2021-38671 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 More likely
High CVE-2021-1678 Windows NTLM Spoofing 8.8 0.1003 Exploitation Less Likely
High CVE-2021-36960 Windows SMB Information Disclosure 7.5 0.0329 Exploitation Less Likely
High CVE-2021-40447 Windows Print Spooler Components Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2021-38667 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-36968 Microsoft Windows DNS Elevation of Privilege 7.8 0.0055 DisclosedExploitation Less Likely
High CVE-2021-36964 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38628 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38630 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38638 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2021-38629 Windows TDX.sys Information Disclosure 6.5 0.0269 Exploitation Less Likely
Routine CVE-2021-36959 Windows Authenticode Spoofing 5.5 0.0135 Exploitation Less Likely
Routine CVE-2021-36962 Windows Installer Information Disclosure 5.5 0.0129 Exploitation Less Likely
Routine CVE-2021-36961 Windows Installer Denial of Service 5.5 0.0106 Exploitation Less Likely
Routine CVE-2021-36969 Windows Redirected Drive Buffering Information Disclosure 5.5 0.0088 Exploitation Less Likely
Routine CVE-2021-38635 Windows Redirected Drive Buffering Information Disclosure 5.5 0.0088 Exploitation Less Likely
Routine CVE-2021-38636 Windows Redirected Drive Buffering Information Disclosure 5.5 0.0088 Exploitation Less Likely
Showing 1 to 25 of 25 1